$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: XsQefdbcgVOMaI2FFpLzxPsYmuvMx2x9M8WlCTSLbPY= Subject key identifier: A9:3B:55:40:1E:3E:11:FC:3D:E6:72:BE:10:10:98:51:33:8A:25:DC Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0445 Signing time: Wed 13 Aug 2025 00:47:50 +0000 Manifest this update: Wed 13 Aug 2025 00:47:49 +0000 Manifest next update: Wed 20 Aug 2025 00:47:49 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: nab9jSI9yd8SGAy5GW3M2TmL6cfIEXRrSWbiKRdanyU=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Aug 13 00:47:49 2025 GMT Not After : Aug 20 00:47:49 2025 GMT Subject: CN=689be0b5-6899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:6a:2c:22:6e:b2:71:49:34:17:18:1f:1f: c3:13:5c:9f:a8:75:77:52:3a:73:e6:98:e8:e3:6a: 94:72:ec:0f:b4:24:4e:50:3f:0b:25:4f:8f:01:f6: 23:d8:a8:27:60:e0:39:b5:1b:c4:82:83:88:35:2b: a3:70:d0:00:e8:ed:a8:78:b9:a3:75:fd:90:37:34: 09:28:82:aa:f2:dd:63:ad:63:76:f3:e3:82:88:50: d0:5b:b4:87:00:b7:62:a5:b5:9f:47:8d:bd:4e:81: aa:27:8b:2e:95:d8:cf:60:96:6f:6f:a3:4e:96:94: a3:d5:0f:fc:ae:7b:a5:27:85:db:e7:4d:67:89:aa: 7e:06:2d:e5:59:6e:74:be:1a:fc:25:f7:25:71:f6: 6a:c4:2d:01:50:01:72:6f:e0:01:5e:e8:aa:22:bc: 67:ec:b0:ee:b1:6d:06:29:65:3d:d9:bd:8c:06:61: 67:bd:02:d6:21:70:73:54:3e:37:c2:14:ef:19:04: 4c:2e:61:07:2e:16:38:b6:f8:3c:c5:5e:42:03:09: ba:f0:17:07:c9:ba:74:9a:6c:9b:c9:41:86:88:9a: 44:18:ef:2c:6a:0f:be:ad:a7:12:25:9f:5c:ac:75: f3:e2:d5:c0:db:95:d3:e4:ff:51:86:55:ac:c9:fb: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:55:40:1E:3E:11:FC:3D:E6:72:BE:10:10:98:51:33:8A:25:DC X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:2b:92:80:99:3b:02:ae:b4:4f:5e:e1:9e:f7:12:28:45: 81:39:ad:f2:72:5c:a1:39:ad:34:ee:b5:7e:71:7d:d4:86:75: 11:ae:54:f5:8f:0e:e0:34:33:26:95:c5:c1:70:24:44:ee:bb: 15:5f:f6:84:90:05:da:81:5f:bf:c5:02:f5:0a:07:d9:e3:9d: 5b:72:f6:de:63:04:ae:f5:c6:ec:94:bd:21:d5:67:c4:35:73: fd:f7:19:dc:6d:43:f3:4e:c8:2b:1f:90:c0:e6:34:e1:65:22: 4b:aa:9a:06:09:05:9c:26:56:3d:10:22:83:20:64:50:e9:e5: 42:43:87:dd:81:b3:61:f4:d0:ca:40:9f:16:67:f2:ce:b5:2b: 9e:35:87:29:2c:2b:20:26:a3:e1:c0:17:83:82:01:97:d2:b2: 3f:29:65:95:8e:b1:30:88:7c:bd:0c:cb:a0:e0:16:5e:bc:02: 58:e6:ba:cf:e4:3c:76:de:65:78:21:33:0f:90:8a:2b:57:5c: c0:9d:29:4f:85:3b:5f:9c:71:30:5a:25:12:ea:a4:a8:f6:33: e9:90:7a:c7:f5:f8:7b:5b:76:b2:a0:00:ca:06:15:0b:6b:cd: d5:62:e2:e1:81:ac:30:f0:90:a9:11:28:b6:6c:1d:1c:c0:fd: e0:ca:20:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwODEzMDA0NzQ5WhcNMjUwODIwMDA0NzQ5WjAYMRYwFAYD VQQDEw02ODliZTBiNS02ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mFqLCJusnFJNBcYHx/DE1yfqHV3Ujpz5pjo42qUcuwPtCROUD8LJU+PAfYj 2KgnYOA5tRvEgoOINSujcNAA6O2oeLmjdf2QNzQJKIKq8t1jrWN28+OCiFDQW7SH ALdipbWfR429ToGqJ4suldjPYJZvb6NOlpSj1Q/8rnulJ4Xb501niap+Bi3lWW50 vhr8JfclcfZqxC0BUAFyb+ABXuiqIrxn7LDusW0GKWU92b2MBmFnvQLWIXBzVD43 whTvGQRMLmEHLhY4tvg8xV5CAwm68BcHybp0mmybyUGGiJpEGO8sag++racSJZ9c rHXz4tXA25XT5P9RhlWsyfuFLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk7VUAe PhH8PeZyvhAQmFEziiXcMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC4SuSgJk7Aq60T17hnvcSKEWBOa3yclyhOa007rV+cX3UhnURrlT1 jw7gNDMmlcXBcCRE7rsVX/aEkAXagV+/xQL1CgfZ451bcvbeYwSu9cbslL0h1WfE NXP99xncbUPzTsgrH5DA5jThZSJLqpoGCQWcJlY9ECKDIGRQ6eVCQ4fdgbNh9NDK QJ8WZ/LOtSueNYcpLCsgJqPhwBeDggGX0rI/KWWVjrEwiHy9DMug4BZevAJY5rrP 5Dx23mV4ITMPkIorV1zAnSlPhTtfnHEwWiUS6qSo9jPpkHrH9fh7W3ayoADKBhUL a83VYuLhgaww8JCpESi2bB0cwP3gyiAm -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:05 2025 by rpki-client